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(54) Electronic ticket vending system and method thereof 

(57) A system comprises an electronic ticket vend- 
ing and refunding device (1) retained by a ticket publish- 
er, a terminal device* (3) having a dala input device (1 9), 
8 data display device (18), and a data transmission and 
reception device, etc. which are operated by a purchas- 
er, and en electronic ticket storage device retained by 
the purchaser, and the vending and refunding device 
and ihe terminal device ere connected by a communi- 
cation line such as a telephone line, and the storage de- 
vice and the terminal device can be connected in contact 
or non-ccniaci, and transmission and reception of data 
between the vending and refunding device and the stor- 
age device are executed by electronic money and an 
electronic ticket which are electronically signed, and a 
trouble of sending and receiving of an electronic ticket 
and electronic money is prevented by recording the {3 
transaction history as required. LL 
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Description 

The present invention retatee to an Electronic ticket 
vending system or an electronic ticket vending/refund- 
ing system and a method thereof using electronic infor- 
mation (hereinafter called electronic money or electron- 
ic cash) having the value of money tor purchasing eom- 
modilies, receiving services, or cashing a check or elec- 
tronic information (electronic ticket) on train tickets or 
concert admission tickets which are generally called 
tickets. 

Conventionally, to purchase a train ticket or a con- 
cert ticket, tt Is generally necessary to go to a counter 
tor vending tickets. The reason lethal a ticket is a printed 
paper end it is necessary to pay the cost ol the ticket. 
Some ticket may be purchased by telephone, though ft 
is necessary to mail the ticket. In this case, a credit card, 
bank transfer, man transfer, or cash registration is used 
so as to pay the coal of the ticket. However in the case 
of bank transfer, mail transfer, of caeh registration, il Is 
necessary to go to a bank or a post office. 

Hecenlly. 83 a new settling means, lor example, 
there is a method using electronic data (hereinafter re- 
ferred to aa electronic money) having the value of mon- 
ey which is disclosed in Published Unexamined Patent 
Application (Based on international Application) 
5-504G49. In this conventional example, a means for 
storing electronic money (hereinafter called an eleclron- 
icpurse). a means for transferring electronic money be- 
tween e host computer of a bank and an electronic 
purse, a means 1or transferring electronic money be- 
tween two electronic purses, and a means tor prevent- 
ing forgery or illegal reproduction of electronic money 
are described In this example as a means for prevent- 
ing forgery and illegal reproduction Of ftleelronic money, 
an asymmetric encryption algorithm represented by the 
ASA (Ftivest Shamier Adleman) algorithm and a sym- 
metric encryption algorithm represented by the DES 
(Data Encryption Standard) are used. 

By using an electronic money system having these 
encryption arts, electronic money can be transferred 
safely between two electronic purses connected by a 
telephone Una. The encryption arts used in this conven- 
tional example can be applied also to transfer of elec- 
tronic ticket informal Ion by a public line such as tele- 
phone. Namely, when an electronic ticket having elec- 
tronic ticket information printed on a paper, the afore- 
mentioned electronic money as a means for paying the 
ticket cost, and a physical storage medium such as an 
IC card storing them are used, by using a communica- 
tion means such as telephone, a ticket can be pur- 
chased without goingtoa ticket vending window, a bank, 
ot a post office. In the same way. refunding of the ticket 
cost due tocancel of the ticket can be executed by U6ing 
a communication means such as telephone. 

An electronic ticket storing just electronic ticket in- 
formation may be easily forged or reproduced illegally, 
By using encryption by an asymmetric algorithm equiv- 



alent to the means for preventing forgery and illegal re- 
production of electronic money which Is used in the 
method disclosed in Published Unexamined Patent Ap- 
plication 5-504643 mentioned above, illegality can be 
5 prevented to a certain extent. 

In the encryption method In the aforementioned 
conventional example, whan electronic money is sent 
between electronic 

jo purses storing electronic money, by using " •« only 
common global secret key in one electronr'. money 
system as a means tor judging wheiherthe opposite 
of communication belongs to Ihe same electronic 
money system as that of oneself or not, a local 

is secret key used by each electronic purse when 
money is sent between electronic purses is signed 
electronically. AH electronic purses belonging to the 
aforementioned electronic purse system have a 
global public key corresponding to the atoremen- 

20 lioned global secret key, so that by using the globe) 
public key, the encryption method can judge 
whether the opposite of communication belongs to 
the same electronic money system as that of one- 
self or not. There is a eo-called prepaid card for pur- 

2$ chasing by prepaying the cost as electronic money. 

A prepaid card does not have a function for using 
for anything like money, and objects to be pji- 
chased (commodities or services) are decided, and 
information to be stored is just data of frequency 

$0 equivalent to the selling price. Particularly, since a 
prepaid card cannot cancel or refund a purchased 
object, It Is different from electronic money which 
functions like money. 

However, if U is attempted to apply an electronic 
money system having the aforementioned encryp: 
art ot the prior art to an electronic ticket vending and 
purchasing system using a public line such as tele- 
phone, there is only one kind of common global secrst 

40 key and it is not signed electronical ly on the electronic 
money Itself , so that the problems described hereunder 
are imposed. 

When A plurality of ticket publication sources (lor 
example, a railroad corporation, airplane company, 

■*s event promoter, etc.) share the same electronic ticket 
system, In other words, when electronic tickets pub- 
lished by different ticket publishers are stored and used 
In one kind of electronic ticket storage device al the 
same time or one after another, a ticket publisher may 

so forge or reproduce illegally a lioket published by another 
licket publisher by using the I/O interface^ command in- 
terlace, or encryption mechanism olthe electronic ticket 
slorage device. Therefore, when the seme electronic 
ticket storage device shared, a means for preventing 

fis forgery and illegal reproduction ot a licket by another 
ticket publisher is necessary. There is an I C card (also 
called a smart card) as a typical example of the elec- 
tronic licket storage device. 
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an electronic tickel is executed via a telephone line for 
preventing a trouble on whether the electronic money 
and the electronic ticket are given or received actually. 
Preferably, still another object Of the present inven- 
s tion is to provide an electronic ticket vending and relund- 
ing system and a vending and refunding method thereof 
lor preventing a ticket purchaser from retaining both a 
valid ticket and a refund at the same time so as to refund 
the ticket cost and proving thai the ticket purchaeer re- 
10 tains the ticket when he cannot receive the refund. 

Preferably, the electronic ticket vending system Of 
vending and refunding system method thereof 

of the present invention comprise a vending device (or 
generating an electronic ticket and executing at least 
is one of vending and refunding by exchanging the gener- 
ated electronic ticket with electronic money end a com- 
munication line connected to H end lurthermore com- 
prise at least one terminal device connected to the 
aforementioned communication line 1or executing input. 
20 output, and transmission and reception so es to execute 
at leasi one of vending and refunding of an electronic 
ticket and an electronic ticket storage device having a 
function tor electronically connecting the aforemen- 
tioned terminal device for storing electronic money and 
ss a purchased electronic ticket, wherein by a request of 
at least one ol purchasing and refunding of an electronic 
ticket by al least one of the aforementioned terminal de- 
vice and electronic ticket storage device, at least one ol 
the electronic tlckel and the Blectronlc money is sent 
30 from the aforementioned electronic ticket vending de- 
vice via the aforementioned communication line. 

Preferably, more concretely, the electronic ticket 
vending and refunding system of the present invention 
is a ticket vending and refunding system using electronic 
3S money and an electronic ticket and comprises an elec- 
tronic ticket vending and refunding device for producing 
an electronic ticket and vending or refunding the pro- 
duced electronic ticket by electronic money, a terminal 
device for executing at least input, display, and tranB- 
40 mission and reception of electronic ticket vending and 
refunding data, and an electronic ticket storage device 
for storing an electronic ticket purchased by electronic 
money, wherein the aforementioned electronic ticket 
vending and refunding device is connected to the atore- 
45 mentioned terminal device by a communication line 
such as a telephone line and the aforementioned elec- 
tronic ticket storage device Is connected to the terminal 
device In contBCi or non-con lacl. 

In the ef orement toned elect ronie ticket vending and 
so refunding system, it is desirable thatthe aforementioned 
electronic ticket vending and refunding device compris- 
es al least a ticket production means for producing a 
ticket, a ticket transmission and reception means for 
transmitting or receiving an electronic ticket, a money 
se transmission and reception means for transmitting or re- 
ceiving electronic money, a money storage means for 
storing electronic money, a transaction history storage 
means for storing a transaction history, and an entry p- 
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Furthermore, when ticket information stored In the 
electronic ticket storage device is Hncrypted, to confirm 
the ticket information stored in the electron to ticket stor- 
age device by a ticket purchaser, a terminal device hav- 
ing a decryption means is necessary. However, in con- 
sideration of convenience, it is desirable that a portable 
terminal device on the markBt can be used. 

When cash or a ticket is given or received by tele- 
phone, a ticket purchaser and a ticket vender are locat- 
ed away from each other, so that a trouble may be 
caused that cash or a ticket is stolen off or cash or a 
ticket is not given or received actually. For example, 
when a ticket purchaser makes a claim for thai he re- 
ceives no ticket after he purchases a ticket and pays 
electronic money as a cost of the ticket, the ticket pur- 
chaser may tell the truth or make a false statement. 
Even when a ticket purchaser makes a craim for that no 
electronic money is sent to him after he transfers his tick- 
et to the ticket vender so aeto ret und the ticket, the same 
ts caused. 

Furthermore, It l3 assumed that to refund the ticket 
cost, a ticket purchaser sends an electronic ticket to a 
ticket vender first and the licket vender checks the va- 
lidity of the ticket and then eendB the ticket cost to the 
ticket purchaser by electronic money. When an electron- 
ic tickBt is to be sent, if a copy of the electronic ticket is 
sent to the ticket vender without deleting the electronic 
ticket and the electronic ticket storage device (IC card) 
is pulled out forcibly from the terminal device at the same 
time that the ticket cost is sent from the ticket vender, a 
problem arises that the valid tickel and the refunding 
cost of the ticket exist on the ticket purchaeer side at the 
same lime. On the olher hand, when an electronic tickel 
is deleted from the electronic ticket storage deviee so 
as to send the electronic ticket, rf a communication fail- 
ure occurs before the ticket refund reaches the ticket 
purchaser after the electronic ticket is sent, a statue that 
the ticket purchaser loses the ticket and cannot receive 
the refund occurs. Since ihe tickel is deleted, even If the 
ticket purchaser attempts to make © claim for the ticket 
vender, a problem arises that there is no physical evi- 
dence. 

Perlerably, an object of the present invention is to 
solve these problems and to provide an electronic ticket 
vending and refunding system and a method thereof for 
workingwhsn a plurality of ttcketvenders share only one 
electronic ticket vending and refunding system in a sys- 
tem for purchasing or refunding a ticket from a distant 
place using a telephone line for preventing forgery or 
illegal reproduction of an electronic licket by e ticket pur- 
chaser and allowing a ticket purchaser to confirm the 
content of an electronic licket even by a terminal device 
having no means for decrypting ticket information stored 
In the electronic ticket storage device. 

Preterahly. another object of the preeenl invention 
ie to provide an electronic ticket vending and refunding 
system and a vending and refunding method thereof tor 
working when a transaction using electronic money and 
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lion key storage means for storing an encryption key. 

It is desirable that the aforementioned ticket produc- 
tion means comprises 8t least a microcomputer tor pro 
ducing an electronic ticket from data indicating a ticket 
publication source and data mdlcaling the pr«ce of a tick- 

fit- 
To prevent another ticket publisher from publishing 

a ticket which is forged or Illegal* reproduced even H e 
plurality of ticket publishers share a single electronic 
ticket system, the aforementioned electronic ticket 
vending and refunding device can allocate a different 
secret key of symmetric encryption algorithm anda de- 
ferent public key which 1o/ms a counterpart lothe secret 
key to each ticket publisher and store them in the afore- 
mentioned encryption key storage device. 

Furthermore, it is desirable that the electronic ticket 
storage device comprises at least an electronic ticket 
storage means and an electronic money storage means 
tor storing an electronic ticket and electronic money re- 
spectively, a transaction history storage means, an I/O 
interface with the outside, and a microprocessor which 
is set so as to control transmission and reception of an 
electronic ticket and electrons money and storage the 
history thereof . 

Furthermore, it is desirabte that to allow even a ter- 
minal device having no decryption mechanism to con- 
firm the content of an electronic ticket stored in the elec- 
tronic tickel storage device, the electronic ticket storage 
device comprises a means for storing unencrypted tick- 
et data end a means for storing an electronic signature 
which is produced by encrypting the whole or a part of 
the aforementioned ticket data by the secret key of the 
asymmetric algorithm and the microprocessor can op- 
erate so as to return the alorementioned unencrypted 
ticket intormalion to a first command obtained via the 
.aforementioned physical interface with the outside as a 
response to the first command and to check the validity 
of a second command for the second command and re- 
turn the aforementioned ticket information and afore- 
mentioned electronic signature as a response to the 
second command when it judges that the second com- 
mand is valid. 

As an alternative means therefor. iL is possible that 
the aforementioned electronic licket storage means 
comprises a means for storing licket Information which 
is encrypted by ihe secret key of the asymmetric encryp- 
tion algorithm and a means tor storing a public key which 
forms a counterpart to the secret key which encrypts the 
ticket Information and the microprocessor is set so as to 
return the result which is obtained by decrypting the 
aforementioned encrypted ticket information bythe pub- 
lic key to a first command obtained via the aforemen- 
tioned physical interface with the outside as a response 
to the fir* command and to check the validity of a sec- 
ond command tor the second command and return the 
aforementioned encrypted ticket information as a re- 
sponse to the second command when it judges that the 
second command is valid. 



Furthermore, as a means for judging the validity of 
an electronic tickel. it is possible that the aforemen- 
tioned microprocessor of the electronic ticket storage 
device is set so as to return a response to a third com- 
6 mand and an electronic signature obtained via the phys- 
ical interface with the outside on whether there exists 
an electronic signature conforming to the aforemen- 
tioned electronic signature in the electronic ticket stor- 
age means. 

io To prevent an I/O history of an electronic ticket and 
electronic money from alteration. It is desirable that the 
aforementioned microprocessor of the electronic licket 
storage device is set so that an item relating to the afore- 
mentioned electronic ticket cannot be deleted from the 

is transaction history storage means until the electronic 
ticket stored in the electronic ticket storage means b de- 
leted. 

Furthermore, to prevent both the ticket to be refund- 
ed and the refund from existing In the electronic ticket 
20 storage device at the same time by pulling out the elec- 
tronic ticket storage device lorcibly from the terminal de- 
vice for refunding, it is possible that the aforementioned 
microprocessor of the electronic ticket storage device is 
set so as to delete the electronic ticket to be refunded 

ss which te stored in the electronic tickel storage area of 
the electronic tickat storage means when electronic 
money ie stored in the aforementioned electronic money 
storage means so as to refund the ticket- 
As an alternative means therefor, it is possible that 

30 the aforementioned electronic licket storage means of 
the electronic ticket storage device has an area for stor- 
ing an invalid flag and the aforementioned microproces- 
sor of Ihe electronic ticket storage device makes the 
aforementioned invalid flag corresponding to the eiec- 

35 ironic licket to be relunded valid for refunding of the tick- 
et, and then transfers the electronic ticket to the elec- 
tronic ticket vending and refunding device, and deletes 
the electronic licket etored in the electronic ticket stor- 
age area of the electronic tickel storage means after 

40 completion of transfer. 

Preferably, the electronic ticket vending and refund- 
ing method of the present invention is an electronic tick- 
el vending and refunding method for allowing ticket 
vending or refunding to a distant place using an elec- 
ts tronie ticker, electronic money, and a cornmunlcaiion 
jlne, wherein to vend an electronic ticket, when the elec- 
tronic ticket vending and refunding device receives a 
ticket vending request rram a terminal device via the 
communication line, the device sends the target ticket 

so and a cost sending request therefor 10 the terminal de- 
vice via the communication line, receives electron mon- 
ey of the target ticket cost from the electronic ticket stor- 
age device connected to the terminal device via the 
communication line, then produces an electronic ticket 

ss which is requested to vend, sends the electronic ticket 
to the terminal device via the communication terminal, 
vends the electronic ticket by transferring the electronic 
ticket lo the electronic ticket storage device by the ter- 
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minal device which receives the electronic ticket, end to 
refund the aforementioned purchased electronic ticket, 
when the electronic ticket vending and refunding device 
receives a refunding request from the terminal device 
via the communication line, the device requests sending * 
of the electronic ticket which Is requested to refund to 
the electronic ticket storage device connectedtothe ter- 
minal device, receives the electronic ticket from the 
electronic ticket storage device via the communication 
line, then confirms the validity ol the electronic ticket, 10 
sends electronic money of the ticket relund to the termi- 
nal device via the communication line when it judges 
that the electronic ticket is valid, and rounds the elec- 
tronic ticket by transferring the electronic money to the 
electronic ticket storage device from the terminal device is 
which receives the electronic money. 

Furthermore, it is desirable that when an electronic 
ticket is vended by the aforementioned eleclron'c ticket 
vending and refunding method, the electronic ticket 
vending and refunding device executes a step of receiv- 
ing electronic money from the electronic ticket storage 
device, a step of storing lhat the device receives the 
electronic money from the electronic ticket storage de- 
vice, a step of sending the electronic ticket to the elec- 
tronic ticket storage device, and a step of storing that 
the device sends the electronlo ticket to the electronic 
ticket storage device. Furthermore, to refund the afore- 
mentioned purchased electronic ticket, it is possible that 
the electronic ticket vending and refunding device exe- 
cutes a step of receiving the electronic ticket tram the 
electronic ticket storage device, a step of storing that 
the device receives the electronic ticket from the elec- 
tronic ticket storage device, a step Of sending the afore- 
mentioned electronic money to the electronic ticket stor- 
age device, and a step of storing that the device sends 
the electronic money to the electronic ticket storage de- 
vice. 

.Furthermore, it is desirable that when an electronic 
ticket te vended by the aforementioned electronic ticket 
vendingand refunding method, the electronic ticket stor- 
age device executes a step ol sending electronic money 
to the electronic ticket vending and refunding device, a 
step of storing that the device sends the electronic mon : 
ey to the electronic ticket vending and refunding device, 
a step of receiving the electronic ticket Irom the elec- 
tronic ticket vending and refunding device, and a step 
of storing that the device receives the electronic ticket 
from the electronic ticket vending end refunding device. 

Furthermore, to refund the aforementioned pur- 
chased electronic ticket, it is desirable that the electronic 
ticket storage device executes a step of sending the 
electronic ticket to the electronic ticket vending and re- 
funding device, a step of storing that the device sends 
the electronic ticket to the aloctronic ticket vending and 
refunding device, a step of receiving the electronic mon- 
ey from the electronic ticket vending and refunding de- 
vice, and a step of storing that the device receives the 
electronic money from the electronic ticket vending and 



refunding device. 

Preferably, the present invention having the afore- 
mentioned constitution hae the function and operation 
indicated below. 

The operations of the electronic ticket vending and 
refunding system and the vending and refunding meth- 
od thereol of the present Invention will be explained 
hereunder for (1) a case of purchasing a ticket, (2) a 
case of confirming the content of a ticket, and (3) a case 
of refunding a ticket. 

(t) Case of purchasing a ticket 

When a ticket purchaser purchases a ticket, he op- 
erates a terminal device connected to a communication 
line such as a telephone line and calls out an electronic 
ticket vending and refunding device, that is, a computer 
of a ticket publisher (or a ticket vender). The electronic 
ticket vending and refunding device sends a menu of 
tickets which can be sold to the terminal device via the 
communication line. The terminal device receives the 
menu and displays it on the display means. When the 
ticket purchaser selects the ticket to be purchased using 
the tnput means of the terminal device and then inputs 
necessary conditions such as the number of tickets, 
these data are sent to the electronic ticket vending and 
refunding device via the communlcalton Dne. 

The electronic ticket vending and refunding device 
checks whether the ticket can be vended. When the tick- 
et can be vended, the device calculates the ticket cost 
and sends a sending request command to the terminal 
device. According to this request, the terminal device 
instructs the ticket purchaser to Insert the electronic tick- 
et storage device into the terminal device. In this case, 
a contact or non-contact type IC card may be used for 
the electronic ticket storage device. When a non-contact 
type IC card is used, electromagnetic waves such as 
infrared light or radio waves or ultrasonic waves are 
used for communication, go that there is no need lo in- 
sert the IC card into the terminal device and It is desir- 
able to bring the IC card close to the terminal device. 
When the ticket purchaser inputs a sending permission 
response from the input means of the terminal device, 
the response is semtoths electronic ticket vending and 
refunding device Irom the terminal device. The electron- 
ic ticket vending and refunding device receiving the re- 
sponse sends a sending command to Ihe electron ic tick- 
et storage device via the terminal device. To prevent for- 
gery or illegal reproduction of electronic money due to 
interception of the communication content of the elec- 
tronic money, It is possible to use the sending procedure 
using the encryption art described in Published Unex- 
amined Patent Application 5-50464*3 of the prior art. 
When the electronic ticket storage device sends the 
elect rontc money and then receives confirmation of re- 
ception of the electronic money from the electronic ticket 
vending and refunding device, the electronic ticket stor- 
age device records the ID of the opposite of sending 
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(Identifier), sent money, and completion ol sending in 
the I/O history of electronic tickets and electronic money, 
thai is. the transaction history. 

Next, when the electronic ticket storage device 
sends completion oT recording and the electronic ticket 
vending and refunding device receives it, the electronic 
ticket vending and refunding device produces an elec- 
tronic ticket and then sends the electronic ticket to the 
terminal device. In this case, the electronic ticket in- 
cludes ticket information such as the ticket name, pub- 
lication source, date, and transaction sequence number 
and en electronic signature for proving the validity of the 
information. An electronic signature is data in which the 
whole or a part of ticket information is encrypted by using 
the secret key 01 an asymmetric encryption algorithm 
which Is allocated tc each ticket publisher beforehand. 
As a method tor extracting a part ol data from the afore^ 
mentioned ticket information, there is a method using 
the hash function. As an alternative idea, a method for 
conetiluilngan electronic ticket only by data in which the 
whole of the ticket information Is encrypted by the afore- 
mentioned secrer) key may be used. 

The constitution of the electronic ticket storage 
mesns cf the electronic ticket storage device varies with 
the data structure of an electronic ticket One is a con- 
strtutkxi having an area for storing unencrypted ticket 
information and an area for storing an electronic signa- 
ture and the other « a constitution having an area for 
storing ticket information In which ell the statements are 
encrypted and an area for sloring a public key which 
forms a counterpart to the secret key which encrypts tne 
aforementioned ticket information. In the former case, 
the electronic ticket vending and refunding dev.ce sends 
the unencrypted ticket Information data and the elec- 
tronic signature to the terminal device and in the latter 
case it sends the ticket information data in which all the 
statements are encrypted and the public key which 
terms a counterpart toihe secret key to the terminal de- 
vice. 

For an electronic ticket having one of the aforemen- 
tioned data structures, the terminal device transfers the 
received data to the electronic ticket storage device and 
the electronic ticket storage device stores the received 
data in the electronic ticket storage means. When the 
data is stored in the electronic ticket storage means, the 
electronic ticket storage device records in the transac- 
tion history storage means that the electronic ticket is 
received. 

Also as to transmission or reception of en electronic 
ticket in the same way ©s transmission or reception of 
electronic money, by using the communication proce- 
dure described In Published Unexamined Patent Appli- 
cation 5504643 mentioned above, forgery or illegal re- 
production of an electronic ticket due to interception of 
the communication content can be prevented. 



(2) Case of confirming the content of a licket 

Wh en a ticket purchaser confirms Ihe content of the 
purchased licket by the terminal device, he inputs a tick- 
s' et data display command to the terminal device. When 
the Terminal device receives the command. It sends a 
commend lor reading unencrypted data to the electronic 
ticket storage device via the communication line such 
as a telephone line. When the stored electronic ticket 
to comprises unencrypted ticket data information and an 
electronic signature* the electronic ticket storage device 
returns only unencrypted data to the terminal device for 
this reading command and when the stored electronic 
ticket comprises data in which all the statements are en- 
75 crypted and a public key. the electronic ticket storage 
device returns the result which is obtained by decrypting 
the ticket data In which all the statements are encrypted 
by the public key to the terminal device. The terminal 
device displays the received unencrypted licket intor- 
eo mation data on the display unit of the terminal device. 

As mentioned above, the terminal device basically 
provides an Interface between a licket purchaser, the 
electronic ticket storage device, and the electronic ticket 
vending and refunding device connected vie the oom- 
ss munlcaticn line. The encryption process tor an electron- 
ic ticket and electron to money which is executed for 
communication with the electronic licket vending and re- 
funding device can prevent forgery and illegal reproduc- 
tion of an electronic ticket and electronic money and al- 
so teration of a transaction history by concealing the en- 
cryption process by allowing the electronic ticket stor- 
age device to execute it. Asa result, the transaction his- 
tory can Increase the proving ability for transfer of an 
electronic ticket and electronic money. 

$s 

(3) Case of refunding a ticket 

Next, to refund the purchased ticket, the ticket pur- 
chaser calls out the electronic ticket vending and relund- 

40 ing device from which the ticket is purchased by the ter- 
minal device via the communication line such as a tele- 
phone line and selects Ticket Refunding by Ihe service 
kind selection menu. The terminal device reads and dis- 
plays a list ol electronic tickets stored in the electronic 

as ticket storage device. When tne ticket purchaserselects 
the licket to be refunded, the terminal device sends the 
corresponding electronic ticket number to the electronic 
ticket vending and refunding device. The electronic tick- 
et vending and refunding device sends a request com- 

$o mand for sending the electronic licket of the correspond- 
ing ticket number to the electronic licket storage device 
via the terminal device. When the electronic licket stor- 
age device receives reception confirmation of the cor- 
responding electronic ticket from the electronic ticket 

ss vending and refunding device after it sends the corre- 
sponding electronic ticket to the electronic ticket vend- 
ing and refunding device, the electronic ticket storage 
device records in the transaction history storage area of 
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the electronic ticket storage device thai it sends the ID 
of the opposite ol sending and the aforementioned elec- 
tronic ticket. m 

In this case, if an area for storing an invalid flag ts 
provided in the electronic ticket storage area, the flag is 
turned ON and the corresponding ticket is made invalid. 
The reason is that H the data of en electronic ticket to 
be sent is deleted, and a communication failure occurs, 
and hence a ticket purchaser oannot receive the refund, 
the evidence indicating the content of the stored elec- 
tronic ticket Is prevented from missing and if a valid ticket 
is left as it is, a status that the electronic ticket storage 
device is disconnected forcibly from the terminal device 
at the same time that the ticket purchaser receives the 
electronic money and both 1 he valid ticket and the refund 
are retained is prevented from occurrence. However, 
the alorementloned iwalid flag may be used or may not 
be used. When an Invalid flag Is not used or Is not pro- 
vided, a saving area for tickei data end an electronic 
signature is provided in the electronic ticket storage 
means beforehand and the ticket data Is made invalid 
by storing ft in the saving area. Namely. K is desirable to 
' store the ticket data with an electronic signature to be 
sent in the saving area immediately before starting 
sending of the electronic ticket, delete the aforemen- 
tioned ticket date existing tntha ticket storage area, and 
thBn send the ticket data. 

On the oth Br hand, the electronic tickei vending and 
refunding device receiving the electronic ticket records 
in the transaction history storage means of the electron- 
ic ticket vending and refunding device that it receives 
the electronic ticket. Next, the electronic tickei vending 
and refunding device confirms the validity of the sent 
electronic ticket using the public key which forms a 
counterpart to the secret key whieh electronically signs 
the ticket retailed by the electronic tickei vendng and 
refunding device. When the electronic ticket vending 
and refunding device judges that the electronic ticket is 
valid, it calculates the refund from the ticket cost and the 
ticket refunding commission and sends electronic mon- 
ey equal to the refund to the terminal device. If this oc- 
curs, the electronic ticket vending and refunding device 
records sending of the electronic money and the amount 
thereof in the transaction history storage means ol the 
electronic ticket vending and refunding device. 

When the electronic storage device receives the 
electronic money sent from the electronic ticket vending 
and refunding device via the terminal device, it accumu- 
lates The sent eteclronta money to the amount of money 
stored in the electronic ticket storage means and 
records reception of the electronic money end the 
amount thereof in the transaction history of the electron- 
ic ticket storage device and then deletes ihe electronic 
tickei to be refunded. If there is an area for storing an 
invalid flag in the electronic ticket storage area in this 
case, the electronic storage device turns the invalid flag 
OFF.' Furthermore, the electronic ticket storage device 
puts the item In the I/O history relating to the deleted 



electronic ticket into the deletable state. As a method 
thereof, there Is a method for providing a deletable flag 
for each Item In the transaction history and turning the 
deletable flag ON when it becomes deletable. The 

5 invalid flag is turned OFF when the Item in the transac- 
tion history corresponding to the deletable flag is delet- 
ed. By doing this, the transaction history cannot be de- 
leted while an electronic ticket exists in the electronic 
ticket storage means, so that a trouble due to alteration 

10 of the transaction history can be prevented. When trans- 
action histories are accumulated up to the storage ca- 
pacity, it is desirable to delete deletable histories se- 
quentially. 

As a method for checking Th e val idity of an e leeiron* 
is ic tickei other than a method, as mentioned above, for 
transferring an electronic ticket to the electronic ticket 
vending and relunding device from the electronic ticket 
storage device and checktn g the validity by the electron- 
ic ticket vending and ref unding device, th ere Is a method 
so for sending unencrypted ticket information to ihe elec- 
tronic ticket vending and refunding devicefromthe elec- 
tronic ticket storage device, producing an electronic sig- 
nature from the ticket information asm from the electron- 
ic ticket vending and refunding device, sending the elec- 
ts tronio signature to the electronic tioket storage device, 
and judging the validity by the electronic ticket storage 
device. To realize the method, it is desirable to provide 
a means for checking for the identity of the electronic 
signature sent to tho electronic ticket storage device 
SO with the electronic signature retained by the electronic 
ticket storage device. 

it a gate device having a publlo key which forms a 
counterpart to the secret key used to produce an elec- 
tronic signature is installed In the entrance gate of an 
35 installation using tickets actually and the electronic tick- 
et storage device is inserted Into or located in the neigh- 
borhood of the gate device for use, paperless tickets can 
be used. 

The foregoing and other objects, advantages, man- 
40 ner of operation and neve Heatu res of the present Inven- 
tion will be understood from the following detailed de- 
scription when read in connection with the accompany- 
ing drawings. 

Fig. 1 is an overall block diagram showing an em- 
45 bodlment Of ihe electronic ticket vending and refunding 
system of the present invention. 

Fig. 2 is a block diagram showing the rough conatl- 
tmion of the electronic tfeket vending and relunding de- 
vice shown in Fig. 1 . 
so Fig. 3 is a block diagram showing en embodiment 
of the terminal device shown in Fig. 1. 

Fig. 4 is a schematic diagram showing the constitu- 
tion of the electronic ticket storage device shown in Fig. 
1. 

ss Fig. 5 is a flow chart showing an embodiment of the 
processing procedure for purchasing an electronic ticket 
using the electronic ticket vending and refunding system 
shown in Fig. 1 . 
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Fig. 6 b an illustration showing operation screen ex- 
amples displayed on 1he display device of the terminal 
device shown In Fig. 3 according to the processing pro- 
cedure for purchasing an electronic ticket. 

Fig. 7 is a data configuration diagram snowing a s 
content example ot a transaction history file in the elec- 
tronic tickel vending and relunding device shown in Fig. 
2 when an electronic ticket is purchased. 

Fig. 8 is a data configuration diagram showing a 
content example of a transaction history storage area In 10 
the electronictieket storage device shown in Fig. 4 when 
en electronic ticket is purchased. 

Fig. 9 is a data configuration diagram showing a 
content example of a ticket information file of the elec- 
tronic tickel vending and refunding device shown In Fig. i& 
2. 

Fig. 10 Is a data configuration diagram showing an 
example of the constitution of an electronic ticket stor- 
age area In the electronic ticket storage device shown 
in Fig. 4. 

Fig. 11 is a data configuration diagram showing en- 
other example ot the constitution of an electronic ticket 
storege area in the electronic ticket storage device 

shown in Ftg. 4, 

Fig. 1 2 Is a flow chart showing an embodiment of 1B 
the processing procedure for refunding en electronic 
ticket using the electronic ticket vending end refunding 
system of the present Invention. 

Fig. 13 is an illustration showing operation screen 
examples displayed on the display device of the terminal M 
device shown in Fig. 3 according to the processing pro- 
cedure for refunding an electronic ticket. 

Ftg. 14 Is a data configuration diagram showing a 
content example of a transaction history file in the elec- 
tronic ticket vending and refunding device shown In Fig. « 
2 when an electronic tfcket is refunded. 

Fig, 15 is a data configuration diagram showing a 
content example of a transaction history storage area in 
the electronictieket storage device shown in Fig, 4 when 
an electronic ticket is refunded. 4t 

Fig. 1 6 is a block diagram showing another embod- 
iment of a terminal device used in Ihe electronic ticket 
vending and refunding system of the present invention. 

Fig. 17 is an illustration showing operation screen 
examples displayed when the Information stored in the 4i 
electronic ticket storage device shown In Fig. 4 Is con- 
firmed. 

An embodiment of the electronic ticket vending and 
refunding system and the vending and refunding meth- 
od thereof of the present invention will be explained In « 
detail hereunder by ret erring tothe accompanying draw- 
ings. 

Fig. 1 is e block diagram showing the whole consti- 
tution of the electronic ticket vending and refunding sys- 
tem of ihe present invention. Reference code i indicates si 
an electronic ticket vending and refunding device re- 
tained by a ticket publisher and a plurality ot electronic 
tickel vending and refunding devices 1 are connected 
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to a telephone line 4 respectively. A plurality of terminal 
devices 3 having a man-machine interface which are 
used end operated when a ticket purchaser purchases 
or refunds a ticket are connected to the telephone line 
A. Electronic ticket storage devices 2 retained by ticket 
purchasers respectively are connected to the terminal 
devices 3 by physical interfaces (not shown in the draw- 
ing) in contact or non-contact so as to execute two-way 
communication. 

As mentioned above, the electronic ticket vending 
end refunding system of the present Invention Is a sys- 
tem comprising a plurality of electronic ticket vending 
and refunding devices i connected to the telephone line 
4, a plurality of terminal devices 3, end a plurality of elec- 
tronic ticket storage devices 2 which can be connected 
to the terminal devices 3 in contact or non-conlaot As 
a means for connecting each of the terminal devices 3 
non-contact, electromagnetic waves such as radio 
waves or infrared light or ultrasonic waves are used and 
as a means for realizing Uie electronic Uckel storage de- 
vices 2, an IC card (also called a smart card) can be 
used. 

The more detailed const it utton of each of the devic- 
es i to 3 constituting the aforementioned electronictiek- 
et vending and refunding system will be explained here- 
under with reference to Figs. 2 1o 4. 

Firstly, the constitution ol the electronic Ticket vend- 
ing and relunding device 1 is shown in Fig. 2. The elec- 
tronic ticket vending and refunding device 1 comprises 
a siorage device 11, a display device 18 and an inpui 
device 1 9 which are used to confirm the vending condi- 
tion of tickets and add new tickel information, a commu- 
nication device 20 for communicating with the electronic 
ticket storage devices 2 using a communication line 
euch as a telephone line, and a microprocessor (CPU) 
21. Furthermore, to this electronictieket vending and re- 
funding device 1. a large capacity storage device (not 
shown in Ihe drawing) such as a hardware disk which 
stores a ticket information file 1 6 for storing information 
on whether tickets can be vended and the ticket price 
end a transaction history file 17 for recording a history 
when electronic money and an electronic ticket are 
transmitted to or received from the electronic ticket stor- 
age devices 2 is connected via a bus fine 10. When the 
electronic ticket vending end refunding device 1 has a 
buift-in large capacity storage device, ft is desirable to 
store the ticket information file 16 and the transaction 
history file 1 7 In it As shown In Fig. 2, the storage device 
n comprises an electronic money storage area 12, an 
area 1 3 for storing an encryption key used to sign ticket 
information data electronically, en area 14 for storing a 
program, and a working area IB. The CPU 21 controls 
the aforementioned devices 11 to 20 constituting the 
electronic ticket vending and refunding device 1 accord- 
ing to the program stored in the program storage area 
of ths siorage device 1 1 . The communication method of 
the communication device 20 may be wire communica- 
tion or radio communication. 
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Naxi. the constitution of the terminal device 3 is 
shown in Fig. 3. The terminal device 3 comprises an in- 
put device 22 for Inputting data, a display device 23 tor 
displaying data, a communication device 24 for commu- 
nicating with the electronic ticket vending and refunding 
device 1 using a communication line such as a tele- 
phone tine, a storage device 25, an IC card reader/writer 
(hereinafter abbreviated to JC card FVW) 26 for commu- 
nicating with an IC card 30 comprising an electronic tick- 
et storage device 2 formed on the IC chip, and a CPU 
27 for controlling the aforementioned devices 22 to 26. 

Fig. 4 shows the constitution o1 the electronic ticket 
storage device 2- The electronic ticket storage device 2 
formed on the IC chip comprises a storage unit 3i for 
storing data and a program, an external I/O interface 37 
lor connectingthe IC card FVW 26 of the terminal device 
3 phyaically. and a CPU 36 tor p recessing in accordance 
with the program stored in the storage unit 31. Further- 
more, the siorage unit 31 comprises an electronic ticket 
siorage er«a 32, an electronic money storage area 33, 
a program storage area 34. a transaction history storage 
area 35 for storing records ol transmission find recep- 
tion of an electronic ticket and electronic money, and a 

working area 36. 

The vending and refunding method ol the electronic 
ticket vending and refunding system of the present in- 
vention will be explained hereunder tor (1 ) a case of pur- 
chasing a ticket newly. (2) a case of refunding a pur- 
chased ticket, and (3) a case of confirming the content 
of a purchased ticket by using the devices 1 to 3 having 
the aforementioned constitution. 

(1) Case of purchasing a ticket newly 

Fig. 5 Is a flow chart showing the outline of the 
processing procedure for purchasing an electronic ticket 
using the electronic ticket vending and refunding system 

shown in Fig. 1 - 

To purchase an electronic ticket, a ticket purchaser 
calls out the electronic ticket vending and refunding de- 
vice 1 of a ticket publisher handling the ticket to be pur- 
chased by using the lerminal device 3 (Step 210). When 
the electronic ticket vending and refunding device 1 is 
called out via the telephone line 4, it sends the initial 
menu via the telephone line 4 (Step 220). When the ter- 
minal device 3 receives ihe Initial menu, the terminal de- 
vice 3 displays ft on the display device 23 end walls Tor 
input from the ticket purchaser. 

Fig. 6 shows operation screen examples displayed 
on the display device 23 when a ticket is purchased, in 
Fig. 6. reference code SiO indicates an initial menu 
screen. When the ticket purchaser inputs "1" indicating 
ticket vending from the input device 22. the data is sent 
to the electronic licket vending and refunding device 1 
via the telephone line 4 (Step 230). 

When the electronic ticket vending end refunding 
device i receives it, the electronic ticket vending and 
refunding device 1 sends a ticket menu screen 520 



showing the content of the game (competitor team, 
match date, etc.) to the terminal device 3 via the tele- 
phone line. If the ticket purchaser looks at the ticket 
menu and purchases, tor example, a ticket tor the June 
5 2nd match Of teams A to B. when '2 m is Inputted, the 
input is informed of the electronic ticket vending and re- 
funding device 1 via the telephone line, tn the same way 
hereinafter, when "1 ' indicating reserved seat A is Input- 
ted for a screen 530 showing seat kinds and for exam- 
10 pie 2 tickets are to be purchased for a screen 540 show- 
Ing'the number of tickets, '2" is inputted. As a result, the 
electronic ticket vending and refunding device 1 checks 
whether the ticket requested by the ticket purchaser can 
be vended and when it can be vended, the electronic 
is ticket vending and refunding device 1 calculateslhe tick- 
©t cost and sends the result to the terminal device 3. The 
terminal device 3 displays the received content (the con- 
tent of the purchased ticket, the number ol tickets, cost, 
confirmation thereof, etc) on a screen 550 and when 
so me ticket purchaser inputs "1\ the terminal device 3 
sends it to the electronic ticket vending and refunding 
device 1 . When the ticket cannot be vended, the elec- 
tronic ticket vending and refunding device 1 sends that 
effect to the terminal device 3 and asks the ticket pur- 
26 chaser if he will purchase another ticket. Whan the licket 
purchaser wants to purchase another ticket, the terminal 
device 3 displays the ticket menu eereen 520 showing 
the game content again. In this case, the electronic tick- 
et vending and relunding device n may ask ihe ticket 
so purchaser the screen to be displayed (Steps 240, 250). 
When the electronic ticket vending and refunding 
device 1 receives it t the device presses the terminal de- 
vice 3 to insert the electronic ticket storage device (IC 
card) 2 into the lerminal device 3 (screen 560). When 
3S the electronic Ifckel storage device 2 is a norvcontaet 
IC card. U is desirable to bring the electronic licket stor- 
age device 2 close to the terminal device 3. When the 
ticket purchaser inserts the electronic licket siorage de- 
vice 2 into the IC card FVW 26 of the terminal device 3. 
ao the terminal device 3 informs the electronic ticket vend- 
ing and retunding device 1 that the electronic licket stor- 
age device 2 is inserted. The electronic ticket vending 
and refunding device 1 sends a request command for 
sending a ticket cost of 7400 yen to the electronic ticket 
*s storage device 2 via the terminal device 3 (Step 260). 
When the processing procedure from Step 260 to Step 
470 is In execution hereafter, the display device 23 of 
the terminal device 3 displays Under Processing* like 
a screen 670 shown in Fig. 6- 
so in this case, as an encryption method tor sending 
electronic money, the method used for sending between 
electronic purses which isdisctosed In Published Unex- 
amined Patent Application 5-504643 described In the 
conventional example te used. This method will be ex- 
ss plained briefly hereunder. In the method, an asymmetnc 
encryption algorithm represented by Ihe "RSA system is 
used. Each electronic purse retains a global public key 
pg which "a shared by all the electronic purses, a local 
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secret key Sli which is intrinsic to each electronic purse, 
a local public key Pli, and PirSg which Is obtained by 
encrypting the local public Key PH by a global secret key 
Sg A symbol * indicates encryption or decryption, and 
the preceding ol the symbol * Indicates data to be en- 
crypted or decrypted, and the subsequent of the symbol 
• Indicates a key used for encryption or decryption. As- 
sumlng the local secret key Of the electronic purse on 
the sending side as Sis and the focal public key thereof 
ae Pis and the local secret key ol the electronic puree 
on the receiving side as Sir and the local public key 
thereof as P1 r. the electronic puree on the receiving side 
sends PtrSg+FTSIr to the electronic purse on the 
sending side. A symbol R indicates a message on the 
receiving side Including transaction identrfication, trans- 
action sequence number, and data (data of an amount 
oI money since money Is sent in this example). When 
the electronic puree on the sending side receives ft, the 
electronic purse on the sending side acquires the local 
public key P1 r using the global public key Pg related 
by the electronic purse on the sending side and acquires 
the message R on the receiving side including transac- 
tion identification, transaction sequence number, and 
date of an amount of money using the local publ* key 
P1r. The electronic purse on the sending side acquires 
the data of an amount ol money to be sent from the mes- 
sage R and subtracts the amount of money from the 
electrons money stored in the storage unit of the elec- 
tronic purse on the sending side. Next, the electronic 
purse on the sending side produces a message VP. on 
the sending side which includes the amount of money 
\q be sent, the transaction identification, and the mea- 
fiase R and then sends P1 s-Sg+VH'Sl g to the electron- 
ic purse on the receVing side. The electronic purse on 
the receiving side acquires the local public key P1s on 
the sending side using the global public key Pg retained 
by itself, acquires the rrkessage VR on the sending side 
using the local public key Pis, checks whether the mes- 
sage R sent by itself is Included in the message VR, and 
when ft is valid, increases the electronic money stored 
In the storage unit of the electronic purse on the receiv- 
ing side by the amount of money included in the mes- 
sage VR. Finally, the electronic purse on the receiving 
sioe informs the electronic purse on the sending side 
that the process ends normally. By this series of steps, 
electronic money Is sent or received between the elec- 
tronic purses safety. 

The explanation wilt be restarted by referring to 
Figs 5 and 6 again. Assuming that Ihe electronic purse 
on the receiving side is the electronic ticket vending and 
refunding device 1 and the electronic purse on the send- 
ino side is the electronic ticket storage device 2, a ticket 
cost of 7400 yen can be sent to the electronic ticket 
vgnding and refunding device 1 from the electronic ticket 
storage device 2 safely according to the sending proce- 
dure of the aforementioned conventional example. The 
electronic licket storage device 2 receives data sent 
from ihe electronic ticket vending and refunding dev.ee 



i from me external I/O interface 37 via the IC card R/W 
of the terminal device 3 (Step 270), decrypts the sent 
data, subtracts the sent request amount of money from 
the amount ol electronic money in Die electronic money 
s storage area 33, encrypts the amount of money, and 
then sends it to the electronic ticket vending and refund- 
ing device 1 (Step 280). 

When the electronic ticket vending and relundmg 
devicB 1 receives the electronic money ol 7400 yen from 
10 the electronic ticket storage device 2 (Step 30Q), h 
checks for the validity of the received electronic money, 
accumulates 7400 yen in the electronic ticket storage 
area 12 (Step 310). and registers, for example, "Trans- 
action No. 3451 23, 7400 yen is received" In the trans- 
is action history file 1 7 (Step 320). Fig. 7 shows an exam- 
ple of the content of the transaction history tile 17 of the 
electronic Licket vending and refunding device 1 . Trans- 
action history data €50 of the transaction history file 17 
comprises transaction #' data indicating the transac- 
zo tion sequence number, "object" data indicating money 
or a ticket, "sent/received" data indicating whether en 
object is sent or received, "content - data indicating the 
amount of money or the content ol a ticket, and "deleta- 
ble flag" data Indicating whether the transaclton history 
as can be deleted or not. 

NBXt, the electronic ticket vending and refunding 
device 1 sends a notification of acknowledgmem of re- 
ception o1 electronic money <Step 330). When the CPU 
38 of the electronic ticket storage device 2 receives the 
30 notification of reception of electronic money from the 
electronic ticket vending and refunding device 1 via the 
terminal device 3 (Step 340). the CPU 38 registers 
*7400 yen is sent tor professional baseball A" in the 
transaction histoiy storage area 35. Professional baaa- 
35 ball A Is ID of the electronic ticket vending and refunding 
device 1 (Step 350). Fig. 8 shows the content of the 
transaction history storage area 35. Transaction history 
storage data 630 in the transaction history slorage area 
35 comprises ID of an opposite of communication, "ob- 
40 Jed" data indicating money or a ticket, -sent/received" 
data indicating whether an object is sent or received, 
■content' data indicating the amount of money or the 
comer* of a ticket, and "deletable flag" data indicating 
v/hether the transaction history can be deleted or not. 
45 Next, the electronic ticket vending and refunding 
device 1 produces ticket information data 610 compris- 
ing a ticket publication source, an event name, a day 
and time, a place name, a seat number, and a serial 
number (Step 370) and updates the licket information 
& file 1 6 (Step 380). Fig. 9 shows a configuration example 
of the ticket Information data 610 registered in the licket 
information file 16. 

It is necessary that a ticket publisher signs the ticket 
inl ormatiorwdata 61 0 etedronicaHy for prevention of for^ 
65 gery As a method for electronic signature, an asymmet- 
rical encryption algorithm is used. Each ticket publisher 
retains a secret key STk which varies with a ticket pub- 
lisher and a public key PTk corresponding to it. For elec- 
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Ironic signature, the whole or a part of the ticket infor- 
mation data 610 ts encrypted by the secret key STk be^ 
forehand. To produce an electronic signature using a 
part ot the ticket information data 61 0. Ii is desirable to 
acquire a part of the original data u sing the hash junction 
and then encrypt STk. In the electronic ticket storage 
area 32 of the electronic ticket storage device2, the tick- 
et information data 610 end the electronic signature are 
stored. The constitution Of ticket storage data 620 In the 
electronic ticket storage area 32 is shown in Fig. 1 0. The 
lickel .storage data 820 comprises a ticket number, an 
unencrypted ticket Information data 610, an electronic 
signature, and an invalid flag. As an alternative idea, like 
ticket storage data 640 having the constitution shown in 
Fig. 11, it is possible to store data which is obtained by 
encrypting the whole ot the ticket information data 610 
by the secret key STk and a public key PTk which forms 
a counterpart to the eeeret key STk in the electronic tick- 
et storage area 92. 

Hereinafter, in the case of the ticket data shown In 
Fig. 10, a combination of the ticket information data 61 0 
and an electronic signature is colled an electronic ticket 
and in the case of the ticket data shown in Fig. n , the 
tickei information data 670 which is encrypted entirety 
a»d signed elecironfcolly is called an electronic ticket. 

To judge the validity of an electronic ticket, when the 
electronic tickei has the constitution shown in Fig. 10, ft 
is desirable to compare data in which the electronic sig- 
nature is decrypted by using the public key PTk and the 
ticket information data 61 0 so as to check for identifica- 
tion. To produce an eleotronic signature U3ing a part of 
the tickei information data 610, riie desirable 10 compare 
data in which the electronic signature is decrypted by 
the public key PTk end data which ia obtained by ex- 
tracting a part of the ticket information data 610 by using 
the same hash function ae that used when the electronic 
signature is produced so as to check for Identification. 

When an electronic ticket has the constitution 
shown in Fig. 11 , the electronic ticket is decrypted by 
using a public key PTk which forms a counterpart to a 
secret key STk retained by a device for deciding the va- 
lidity and the validity ia judged depending on whether 
the resultant data ean be Interpreted by the electronic 
ticket vending and refunding device 1 or not. As to 
whether interpretable or not, wnen the data decrypted 
by the electronic ticket vending and refunding device 1 
is removed in the predetermined format, and the data 
removed by the electronic lickel vending and refunding 
device 1 is collated with the data which ie retained- be- 
forehand, and a match is found, the data is interpretable. 
When no match is found, the data Is uninlerpreteble. 
The public key PTk retained by the electronic ticket stor- 
age device 2 is used only for decrypting encrypted ticket 
information data by the electronic ticket storage device 
2 when Ihe content of an electronic ticket is confirmed 
by the terminal device 3 having no encryption mecha- 
nism. In this embodiment, the electronic lickel vending 
and refunding device 1 encrypts the whole or a part of 
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the Ticket Information data£ 10 using the secret key ST 1 
(kal In this embodiment) and produces an electronic 
signature. 

Next, in the same communication procedure as that 
& of sending of electronic money, the communication con- 
tent is encrypted and the electronic ticket Is sent to the 
electronic ticket storage device 2 (Step 390). In this 
case, the secret key arid public key to be used tor en- 
cryption may be or may net be the same as those used 
io for electronic money, tn this embodiment. Ihe global se- 
cret key for the electronic ticket storage devices 2 is 
STg, and ihe global public key is PTg, and the local se- 
cret key ST1i which varies with each electronic ticket 
storage device 2 is STii, and the local public key is PTi I 
is and each ticket storage device 2 retains STii. PTti, 
PTg, and PI i'STg. The host computer of the ticket pub- 
lisher, that is, the electronic ticket vending and refunding 
device 1 retains STii, PTll, PTg. PTirSTg t arid STi. 
The global secret key 5Tg b managed under strict mari- 
ne agemem of a generalizing manager ol the electronic 
ticket system. A generalizing system manager I* a man- 
ager of the ticket vending and refunding network system 
and a supplier of an I C card (electronic ticket storage 
device 2) end software for the host computer (electronic 
ticket vending and refunding device 1) and the manager 
manages the global secret key of the encryption algo- 
rithm which is used by a user ot the network lor commu- 
nication. A ticket vender receives the ticket vending and 
refunding software for host computer from ths network 
SO system manager and a ticket purchaser receives an IC 
card from the network system manager. When the elec- 
tron icticket key is the same as the electronic money key, 
It is desirable to set STg=Sg, PTg=Pg, ST1i=Sl 'f. and 
PT1 i=P1 1. In the electronic ticket vending and refunding 
as device 1 in this embodiment, i=1 and In the electronic 
ticket storage device 2, b2. 

The communication procedure between the elec- 
tronic ticket storage device 2 and the electronic ticket 
vending and refunding device 1 will be explained here- 
to under for the two caseG which are divided depending on 
the form of an electronic ticket. 

(a) When an electronic tickei comprises unencrypted 
ticket information data and an electronic signature. 

The electronic ticket vending and refunding device 
1 sends an electronic ticket reception preparation com- 
mand to the electronic ticket storage device 2- Upon re- 
ceipt ot it, the electronic ticket storage device 2 sends 

so pTi2"STg-t-R*5Ti2 as an electronic ticket sending re- 
quest via the lelephone line 4. in this case, the message 
R includes transaction identification, transaction se- 
quence number, and tickei data. The electronic ticket 
vending end refunding device 1 acquires the local public 

55 key PT1 2 using the retained global public key PTg and 
acquires the message R using the public key PT12. The 
electronic ticket vending and refunding device 1 produc- 
es a message VR including R from the ticket information 
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data, the electronic signature, and the message R and 
thens&nds encrypted date of PTirSTg-Am*STn lo 
the terminal device 3. The terminal device 3 wtilch re- 
ceives ft via the telephone line transfers 
PT1l*STg+VR*ST11 to the electronic ticket storage de- 
vice 2 via the IC card RAW 26. The electronic ticket stor- 
age device 2 acquires the encrypted data of 
PTl1*STg+VFTST11 via the external I/O interlace 37 
and the microprocessor 38 decrypts the acquired en- 
crypted data by the following procedure. 

Firstly, the microprocessor 38 acquires the local 
public key PT11 using the global public key PTg and ac- 
quires the message VH using the local public key PRIL 
The microprocessor 38 acquires the message R, the 
ticket information data 610. and the electronic signature 
from the message VR and checks tne validity of R by 
checking whetherthe message R which is sent from the 
electronic ticket storage device 2 before is included or 
not, and then stores the ticket information data 610 and 
Ihe electronic signature in the electronic ticket storage 
area 32- When the electronic ticket storage area 32 can 
store a plurality at electronic tickets, the electronic ticket 
storage Hrea 32 identifies the area storing 1 he electronic 
tickets by the number thereof and stores the electronic 
tickets In the storage area of tho number (1 in this case). 
The electronic ticket storage ares 32 may store only one 
electronic ticket and in this case, there is no need lo 
identify the electronic ticket by the aforementioned 
number. 

The ne*i processing procedure of Step 390 men- 
tioned above will be explained by referring to Figs. 5 and 
6 again. 

When the electronic ticket storage device 2 re- 
ceives the electronic ticket (Step 410) via the terminal 
device 3 (Step 400) and stores the electronic ticket in 
the electronic ticket storage area 32 (Step 420). the 
electronic ticket storage device 2 registers "#1 electron- 
ic ticket is received from professional baseball A' in the 
transaction history storage area 35 (Step 430) and then 
notifies the electronic ticket vending and refunding de- 
vice 1 of acknowledgment of reception ol the electronic 
ticket (Step 440). When there exists only one electronic 
ticket storage area 32, it is possible to register the area 
number where the electronic ticket Is slored or not 

Whan the electronic ticket vending and refunding 
device 1 receives the acknowledgment ol reception 
(Step 460) via the terminal device 3 (Step 450), the elec- 
tronic tickel vending and relunding device 1 registers 
two tickets (2-56, 2-57) of reserved seals A tor June 
2nd match (6/2) for transaction #345123 are published* 
En the transaction hisiory file 17 as shown in the trans- 
action history data 660 In Fig. 7. In this case, transaction 
#345123 may tea ticket publication serial number. 

The elect ronfc ticket vending and refunding device 
1 sends a notification of service completion to the ter- 
minal device 3 (Step 470), and the terminal device 3 dis- 
plays it on the display device 23 (screen 580) (Step 480), 
and then the communication is completed (Slep 4gO). 
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(b) When an electronic tickel comprises only data In 
which the whole of the ticket information data is 
encrypted and signed electronically 

5 In the same way as with the data constitution in (a), 
the electronic ticket vending and refunding device 1 
sends an electronic ticket reception preparation com- 
mand to The electronic ticket storage device 2 and upon 
receipt of it, the electronic ticket storage device 2 sends 
encrypted data of PTl2*STg+R*STl2 to the electronic 
ticket vending and refunding device 1 via the telephone 
line 4. The electronic ticket vending and refunding de- 
vice 1 acquires the message R from the aforementioned 
encrypted dala and then produces a message VR in- 
cluding R from the electronic ticket which is produced 
by encrypting the whole of me ticket information data by 
the secret key ST1 , the message R, and the public key 
PT1 which forms a counterpart to the secret key-STi 
and sends encrypted data of PT11 •STg+VR*PTli to the 
electronic llcket storage device 2 (Step 390). When the 
electronic storage device 2 receives the encrypted data 
(Step 410) via the terminal device 3 (Step 400), the CPU 
39 acquires the message VR from the encrypted data 
in the same procedure as that In <a), acquires the mes- 
sage R : the electronic ticket encrypted by the secret key 
ST1, and the electronic signature from this acquired 
message VR. checks the validity of R by checking 
whether R which is sent from the electronic ticket stor- 
age device 2 before is included or hot, and then stores 
the acquired encrypted electronic ticket data and the 
public key PT1 in the electronic tickel storage area 32 
as the ticket storage data 640 as shown in Fig. 11 (Step 
420). In the same way as with the case in (a), the elec- 
tronic tickel storage area 32 may store only one elec- 
tronic ticket or a plurality of electronic tickets. 

When the storing process into the electronic lickel 
storage area 32 is completed normally in the same way 
as with ihecase in (a), the electronic tickel storage de- 
vice 2 registers "#i electronic tickel is received from pro- 
fessional baseball A' in the transaction history storage 
area 35 (Step 430) and then sends acknowledgment of 
reception to the electronic ticket vending and refunding 
device 1 (Step 440). When the electronic ticket vending 
and refunding device 1 receives the acknowledgment oi 
reception via the terminal device 3 (Step 450), the -elec- 
tronic tickel vending and refunding device 1 registers 
two tickets (2-56, 2-57) of reserved seats A for June 
2nd match (6/2) for transaction #345123 are published" 
in the transaction history tile 1 7 ^Step 460). 

The electronic ticket vending and refunding device 
1 sends a notification of service completion to the ter- 
minal device 3<Step 470), and the terminal device 3 dis- 
plays it on the display device 23 (screen 560) (Step 480), 
and then the communication is completed (Step 490). 

Ag mentioned above, by using a telephone line, a 
ticket purchaser can purchase a llcket without going to 
a ticket stall. Since data between devices is encrypted, 
even it data flowing the telephone line is intercepted, ihe 
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electronic ticket will not be forged or illegally repro- 
duced. Furthermore. Hthe transaction history of an elec- 
tronic ticket and electronic money Is stored, a trouble on 
transmission and reception otthe electronic money and 
electronic ticket can be prevented. In this embodiment, 
by using a microprocessor (CPU) in which a program Is 
set so thai an electronic ticket end electronic money are 
mounted in one device (1C chip) and the transaction his- 
tory when the electronic ticket and electronic money are 
actually eent or received and the transaction history 
which is applicable onry after the electronic ticket Is de- 
leted are updated, the transaction history can be pre- 
vented from alteration. 

(2) Case of refunding a purchased ticket 



NO. 0539 P. 21 



24 

command the terminal device 3 so that the terminal de- 
vice 3 sends read ticket information data to the electron- 
ic tickel vending and refunding device 1 one by one and 
the electronic ticket vending and rounding device 1 dls- 
s plays it or may control so that the CPU 27 at the terminal 
device 3 displays read data. 

A case that the CPU 27 displays all stored ticket 
information data on one screen will be explained here- 
under. 

io When the terminal device 9 displays the ticket infor- 
mation stored in the electronic ticket storage device 2 
as shown on a screen 1 330 and then the ticket purchas- 
er Inputs the ticket number (1 in this example) to be re- 
funded from the ticket Uems shown on the screen 1330, 
the terminal device 3 sends "1 1 to the electronic ticket 
vending and refunding device 1 (Step 970). When the 
electronic ticket vending and refunding device 1 re- 
ceives - 1\ the electronic ticket vending and refunding 
device 1 sendsasendingrequestcommandtortheelee- 
ao ironic ticket of Item No. 1 to the electronic ticket storage 
device 2 via the terminal device 3 {Steps 980. 990). 

The communication procedure between the elec- 
tronic ticket storage device 2 and the electronic licket 
vending and relunding device 1 win be explained nere- 
is under for the two cases which are divided depending on 
the form of an electronic ticket. 

(a) When an el setronfe ticket comprises unencrypted 
ticket information data and an electronic signature 

30 

In the same way as with the case of purchasing a 
ticket newly in (1 ) mentioned above, the electronic ticket 
storage device 2 retains the global public key PTg, the 
local secret key ST12, the local public key PT12, and 

S £ pti 2*STg which is obtained by signing (encrypting) the 
local public key PTI 2 by the global secret key STg and 
the electronic ticket vending and refunding device 1 re- 
tains the global public key PTg, the local secret key STII. 
the local public key PTI I. PTtVSTg which Is obtained 

40 by signing (encrypting) the local public key PTI! by the 
global eecret key STg. and the global secret key STg for 
electronic ticket. 

Firstly, the electronic ticket vending and refunding 
device 1 sends encrypted daia ol PTli"STg+R"STi1 to 

45 the electronic ticket storage device 2 via the telephone 
tine 4. In this case, the message H Includes transaction 
kJemiflcation, transaction sequence number, and ticket 
date. The CPU 3B of Uie electronic ticket storage device 
2 acquires unencrypted ticket information data end sn 

*o electronic signature from the area of Item No. 1 of the 
electronic licket storage area 32, 

Next, the CPU 3B produces a message VR from the 
message R, the ticket information, and the electronic 
signature and sends encrypted data of 

ss PT12"STg+VR*STl2 to 1ha electronic ticket vending 
and refunding device 1 via the telephone line 4 (Step 
1000). When there is an invalid flag in the electronic lick- 
et storage area 32, the invalid flao Is turned ON. The 



Fig. 12 is a flow chart showing the outline of the 
processing procedure for refunding a purchased elec- 
tronic ticket using the electronic ticket vending and re- 
funding system shown in Fig. t and Fig. 13 is an illus- 
tration showing operation screen examples displayed 
on the display device 23 of the terminal device 3 lor re- 
funding an electronic ticket. 

Firstly, a ticket purchaser calls out the electronic 
ticket vending end refunding device 1 of a ticket publish- 
er or a ticket vender of the ticket to be refunded by using 
the terminal device 3 (Step 91 0). The electronic ticket 
vending and refunding device i sends the initial menu 
to the terminal device 3 via the telephone line * (Step 
920) and the terminal device 3 displays an initial menu 
1 31 0 on the display device 23. 

When the ticket purchaser inputs >Z m equivalent to 
ticket refunding using the Input device 22 according to 
the initial menu, the terminal device 3 sends "2" to the 
electronic ticket vending and refunding device 1 via the 
telephone line 4 (Step 030). The electronic ticket vend- 
ing and refunding device 1 eends data corresponding to 
a screen 1 320 to the terminal device 3 and the terminal 
device 3 displays the screen 1320 on the display device 
23 and instructs the ticket purchaser to insert the IC 
card, that is. the electronic ticket storage device 2. 

When the ticket purchaser inserts the electronic 
ticket storage device 2 in which the electronic ticket to 
be refunded is etored, the terminal device 3 sends to the 
electronic ticket vending and refunding device 1 that the 
electronic ticket storage device 2 is inserted. The elec- 
tronic licket vending and refunding device t sends a 
command to the terminal device 3 so as to read the licket 
information data from the electronic ticket storage de- 
vice 2 and display the ticket content on the display de- 
vice 23 (Step 940). The terminal device 3 reads the tick- 
et information data from the electronic ticket storage de- 
vice 2 (Steps 950, 960) and displays the ticket informa- 
tion data on the display device 23- T?ie terminal device 
3 may display a plurality of ticket information data at a 
time according to the size ol the display device 23 or 
may display one by one. Furthermore, in this cass, the 
electronic ticket vending and relunding device 1 may 
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reasonthatthe invalid flag is turned ON without deleting 
the data is mat the data which is stored originally is pre- 
vented from becoming indefinite due to a communica- 
tion tenure before the refunding is completed end at the 
same time, a status that the electronic ticket storage de- 
vice 2 isforcfoly pulled out immediately alter the refund- 
ino ifi completed and both the valid ticket and the refund 
exist in the electronic ticket storage device 2 n prevent- 
ed 

' When the electronic ticket vending and refunding 
device 1 receives this encrypted data via the terminal 
device 3 (Steps 1010. 1020). the electronic ticket vend- 
ing and refunding device i acquires the unencrypted 
ticket information data, the electronic Bfentfu»< and the 
meseage R from 1he message VR, verifies thi ^ 
ot the message R by confirming whether R which is sent 
bv the electronic Ucket vending and relundlng device 1 
belore Is included, and then verifies the validity of the 
etectronlcslgnature (Step 1030). The validity ot the elec- 
tronic signature is verified by decrypting ihe electronic 
signature by the public key PTl retained by the elec- 
tronic ticket vending and refunding device 1 and ^com- 
paring the Identity with the licket information data- When 
the electronic signature is produced from a part of the 
ticket information data, il is desirable to extract a part of 
the ticket information data received by the same proce- 
dure (for example, the same hash function) as that tor 
producing the electronic signature snd compare it with 
the electronic signature which is decrypted before. 

When the confirmation of the validity is completed, 
the electronic licket vending and refunding device 1 reg- 
isters reception of the electronic ticket in the transaction 
history file (Step 1040). Fig. 14 shows transaction his- 
tory data 1 370 which is en example of the content of the 
transaction history f He 1 7 of the electronic ticket vending 
and refunding device 1 . When the electronic ticket is re- 
ceived, the ticket Is refunded, so that the deletable flag 
corresponding to the transaction history of the transac- 
tion number concerned in vending end refunding of the 

ticket is changed to ON. . . 

Thereafter, the electronic ticket vending and refund- 
ing device 1 sends acknowledgment Of reception of the 
electronic ticket to the electronic ticket storage device 2 
(Step 1050) When the electronic ticket storage device 
2 receives the acknowledgment Of reception via the ter- 
minal device 3 (Siep 1 060). the electronic ticket storage 
device 2 registers completion of sending of me ticket in 
the transaction history storage area 35 (Step 1 070). Fig. 
15 shows transaction history storage del* 1380 which 
is an example of the content of the transaction history 
storage area 35 of the electronic ticket storage device 2. 

When the registration is completed, the electronic 
ticket storage device 2 sends notification ol completion 
to the electronic ticket vending and refunding device 1 
(Step 1 0S0). When the electronic ticket storage dev.ee 
2 receives the completion of registration via the terminal 
device (Step 1090), the electronic ticket storage device 
2 updates the licket information file 1 6. registers that th e 



corresponding ticket becomes t evendible -(Step 1100), 
subtracts the refund from the electronic money storage 
area 12. and then sends the electronic money equiva- 
lent to the refund to the electronic ticket storage device 

s 2 (Step mo). . . 

When the refunding commission Is required m this 
case, the electronic ticket storage device 2 calculates 
the refund in consideration of the amount of money. 
When the electronic ticket storage device 2 receives the 

70 electronic money (Step 1130) via the terminal device 
(Step 11 20), the electronic ticket storage device 2 acci*- 
mulatesthe amount of electronic money In the electronic 
money storage area 33 (Step 11 40). The electronic tick- 
et storage device 2 registers reception of the electronic 

is money in the transaction history storage device 35 (Step 
1150) When there exists a deniable flag area in the 
transaction history etorage area 35. the deletable flag 
corresponding to the transaction history concerned m 
vending and purchasing of the refunded ticket Is turned 

*o ON. 

Thereafter, the electronic ticket etorage device 2 
sends acknowledgment of reception of the electronic 
ticket to (Step 1160). When the electronic ticket vending 
and refunding device 1 receivee the acknowledgment of 

us reception from the electronic ticket storage device 2 via 
the terminal device 3 (Step 1170). the electronic ticket 
vending and refunding device 1 registers completion ot 
refunding in the transaction history file 17 (Step 1180). 
When there exists a deletable flag area, the deletable 

30 flag corresponding to the transaction history concerned 
in vending and purchasing of the refunded ticket is 
turned ON. 

Therefore, differences betwaen the example of the 
transaction history data 1370 Of the electronic ticket 
3* vending and refunding device i shown h Fig. 14 and 
the example of the transaction history data 650 shown 
in Fig. ? are the respect that the deletable flag ot the 
transaction history of the transaction number of the tick- 
et and money to be refunded is changed to ON and the 
40 respect that the transaction history of the transaction 
. number receiving the corresponding refunded ticket and 

the transaction history of the transaction number relund- 
ing the corresponding money are added. Differences 
between the example ot the transaction history storage 

as data 13B0 ol the electronic ticket storage device 2 
shown in Fig. iSandthe example ol the transection his- 
tory etorage data 630 shown in Fig. 8 are the respect 
that the deletable fiags of the corresponding money of 
the ID of the corresponding opposite of communication 

so and the licket transaction history are changed to ON re- 
spectively and the respect that the transaction history 
returning the corresponding ticket and the transaction 
history receiving the corresponding money are added. 
Finally, the electronic ticket vending and refunding 

ss device i sends a notification of service completion to 
the terminal device 3 jStep 11 90). and the terminal d». 
vice 3 displays it on the display device 23 (screen 1 360) 
(Step 1200). and the communication is completed (Step 
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1210). 

(b) When an electronic ticket comprises only ticket 
Information data which is wholly encrypted end 
electron I celly signed 

Firstly, the electronic ticket vending and refunding 
device 1 sends encrypted data PTn*$Tg+fl+STi1 
to the electronic ticket storage device 2 via the tele- 
phone line 4. In This case, the message R incl udes trans- 
action identification, transaction sequence number, and 
ticket data. The CPU 38 of the electronic ticket storage 
device 2 acquires the ticket information data which is 
wholly encrypted by the secret key ST1 from the area 
erf Item No. 1 of the electronic ticket storage area 32. 

Next, the CPU 38 produces a message vR from the 
message R and the encrypted tlckei information and 
sends encrypted data of p-n2*STg+VFrSTi2 to the 
electronic ticket vending and refunding device 1 via the 
telephone line 4 (Step 1000). When there Is an invalid 
flag in the electronic ticket storage area 32. Ihe invalid 
flag is turned ON. When the electronic ticket vending 
and refunding device 1 receives it via the terminal device 
3 (Steps 1010, 1020). the electronic ticket vending and 
refunding device 1 acquires the encrypted ticket infor- 
mation data and the message R from the message VR. 
verifies the validity of the message R by confirming 
whether R which is sent by the electronb ticket vending 
and refunding device 1 before is included, and then ver- 
ifies ihe valid hy of the encrypted ticket information data 
(Step 1030). The validity of the encrypted ticket infor- 
mation data is verified by decrypting the ticket informa- 
tion data which is encrypted by the public key PT1 re- 
tained by the electronic ticket vending and refunding de- 
vice 1 and judging whether the decrypted data can be 

Imerpreled or not. 

Herearfier.Step 1040 to Step 1210 are the same as 
the steps in (a) When an electronic ticket comprises un- 
encrypted ticket information data and an electronic sig- 
nature, so that the explanation thereof will be omitted. 

When Were exists no invalid flag in the electronic 
ticket storage area 32, another storage area (not shown 
in the drawing) for storing ticket information data to be 
sent is installed, and the ilcket information data to be 
sent Is copied in this storage area, and the correspond- 
ing ticket information data existing in the electronic ticket 
storage area is deleted, and then the copied ticket infor- 
mation data is sent, and when ticket information data 
having no electronic signature is to be sent, it is not cop- 
ied in the aforementioned another storage area so that 
an occurrence of a status thai there exist a pluralily of 
tickets at the time of communication can prevented and 
the evidence can be perpetuated. 

(3) Case of confirming the content of a purchased 
electronic ticket 

A case that the content of an electronic ticket stored 
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In the electronic ticket storage device 2 is confirmed by 
the terminal device 3 shown in Fig. 3 or a portable ter- 
minal device 1400 having the constitution shown in Fig. 
1 6 will be explained hereunder. In this case, the terminal 

5 device 1400 is usedtor explanation. However, needless 
tD say, the terminal device 3 or a similar device including 
the constitution elements of the terminal device 1400 
may be used. The portable terminal device 1400 com- 
prises, es ehown in Ffg. 16, an Input device 1410 for 

10 inputting data, a display device 1420 for displaying data, 
an 1C card R/W 1430 lor communicating with the elec- 
tronic ticket storage device 2 comprising an IC card, a 
storage device 1440, and a CPU 1450 lor control ling th* 
aforementioned devices 1410 to 1440. 

is The communication procedure between the elec- 
tronic ticket storage device 2 and the electronic ticket 
vending and refunding device t wiP be briefly explained 
hereunder for ttie two cases which are divided depend- 
ing on the form of an electronic ticket by referring to the 

so screen examples shown in Fig. 17. 

(a) When an electronic ticket comprises unencrypted 
ticket information data and an electronic signature 

25 When the power switch of the terminal device 1 400 
is turned on, a screen 1510 Is diepJayad on the display 
device 1420. Whan a ticket purchaser Inserts the elec- 
tronic ticket storage device 2 bio the IC card RAW 1430 
of the terminal device 1410 and Ihen selects 'acknowl- 
edgment of electronic ticket content" by inputting 'i " 
equivalent to ticket content displayed* using the input 
device 1410, the terminal device 1400 sends a com- 
mand for acquiring ticket Information data to the elec- 
tronic ticket storage device 2 via the IC card R/W 1430. 

ss The electronic ticket storage device 2 receives the com- 
mand from the external I/O interface 37 and the CPU 38 
acquires ihe ticket information data from the electronic 
ticket storage area 32 according to the command and 
sends ihe ticket information data to the terminal device 

ao 1 400 via the external I/O Interface 37. The terminal de- 
vice 1400 displays the received ticket information data 
on the display device 1420, for example, as shown on 
a screen 1 520. 

When a plurality of electronic tickets are stored In 

46 the electronic ticket storage device 2, the terminal de- 
vice 1 400 may display the contents of all the electronic 
tickets according to the size of the display device 1420 
or may display one by one. When the number at which 
an electronic ticket is stored is designated so as to send 

so a ticket information data acquisition commend, the con- 
trol operation of the CPU 38 ol the electronic ticket stor- 
age device 2 may be programmed so as to send only 
the electronic ticket data corresponding to the designat- 
ed number to the terminal device 1400 or to send the 

ss ticket information data of all the electronic tickets to the 
terminal device 1400 when no specific number is des- 
ignated. 

If 'acknowledgment of money balance* is selected 
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by inputiing "2* equivalent to -money balance displayed" 
using the screen input device 1410 when the screen 
1510 Is displayed on the display device 1420, in the 
same way as with "ticket content displayed", the termi- 
nal device 1400 sends a command tor acquiring the 
electronic money balance data of the electronic money 
storage area 33 to the electronic ticket storage device 
2 via the IC card R/W 1430. The terminal device 1400 
displays the received electronic money balance data on 
the display device 1420, tor example, as shown on a 

screen 1530. 

Or, il "acknowledgment of transaction history is se- 
lected by inputting "3" equivalent to "transaction history 
displayed" uelngthe screen input device 1410 when the 
screen 1510 is displayed on the display device 1420. in 
the same way as with nickel content displayed", the ter- 
minal device 1400 sends a command lor acquiring the 
transaction history storage data oT the transaction nls- 
toiy storage area 35 to the electronic ticket storage de- 
vice 2 via the IC card FVW 1430. The terminal device 
1400 displays the received transaction history storage 
data on the display device 1420, tor example, as shown 
on a screen 1540. 

(b) When an electronic ticket comprises only ticket 
information data which is wholly encrypted and 
electronically signed 

A difference from the case of (a) mentioned above 
Is that the CPU 38 ol the electronic ticket storage device 
2 acquires data in which the whole of an electronic ticket, 
that is, ticket information data is encrypted and the pub- 
lic key PT1I for decrypting encrypted ticket Information 
data from the electronic ticket storage area 32. decrypts 
the electronic ticket using the acquired public key PTII, 
and then sends the data to the lerminal device 1 400. 

As mentioned above, tor the ticket information data 
acquisition command, the electronic ticket storage de- 
vice 2 sends unencrypted ticket information data to the 
terminal device 1400. so that the encryption/decrypHon 
means is not necessary for the terminal device 1400. As 
a result, even a general portable terminal device can 
confirm the content of a tlckBt briefly and the security 
can be ensured at the same time because the encryp- 
tion method is not known by a third person. Furthermore, 
the validity as an electronic ticket cannot be proved only 
by unencrypted ticket Information data, that is, ticket in- 
formation dala which Is not signed electronically, so that 
there Is an advantage thai the electronic ticket cannot 
be forged only by reproducing the ticks! information da- 
ta. 

The suitable embodiments of the present invention 
have been explained above. However, needless to say, 
the present invention is not limited to the aforemen- 
tioned embodiments and within e range which Is not de- 
viated from the concept of ihe present Invention, the de- 
sign can be changed variously. 

As the aforementioned embodiments show, accord- 



ing to ihe present invention, since a ticket can be pur- 
chased or refunded using a communication means such 
as a telephone line, a ticket purchaser can purchase or 
refund a ticket at home without going to attekel vending 
6 counter. 

Since different ticket publishers can share a single 
eleclronic ticket system safely, a publisher -can store dif- 
ferent electronic tickets in one electronic ticket storage 
device. 

to Furthermore, by storing both electronic money and 
an eleclronic ticket in a single electronic ticket storage 
device and controlling sending and reception thereof 
and the sending and reception history thereof by the mi- 
croprocessor of the electronic ticket storage device, a 

is transaction history having a high evidence ability which 
cannot be altersted easily can be realized. 

Furthermore, it is possible to prevent a ticket pur- 
chaser irom retaining both a valid ticket and a refund m 
the same time and when the ticket purchaser cannot re- 

sq ceivs the refund. H can be proved that he retains the 
ticket. 

Clpimfi 

25 

1. An electronic ticket vending system comprising: 
electronic lioket vending means for generating an 
electronic ticket and executing at least one of vend- 
ing and refunding by exchanging said generated 

SO electronic ticket w8h electronic money; 

a communication line connected to said vend- 
ing means; 

at least one terminal means connected to said 
35 communication line for executing input output, 

and transmission and reception so as to exe- 
cute at least one of vending and refunding of 
an eleclronic ticket; and electronic ticket stor- 
age means having means tor electronically 
ao connecting said terminal means for storing 

electronic money and a purchased electronic 
ticket; 

wherein by a request of one of purchasing and 
refunding d ©n electronic ticket by at least one 
as. of said terminal means and said electronic 

ticket storage means, at least one of said elec- 
tronic ticket and said electronic money is sent 
from said electronic ticket vending means via 
said -communication line. 

so 

2. An eleclronic ticket vending system according tD 
Claim 1, wherein said electronic ticket vending 
means comprising: 

ss ticket production means for producing a ticket; 

ticket transmission and reception means for 
transmitting or receiving an electronic ticket; 
money transmission and reception means tor 
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transmitting or receiving electronic money; 
money storage means for storing electronic 
money: transaction history storage means for 
storing a history (hereinafter referred 1o as 
transaction history) transmitting or receiving 
electronic money and an electronic ticket; end 
encryption key storage means for storing an 
encryption key. 

3. An electronic ticket vending system according to 
Claim 2, wherein said ticket production means com- 
prising: 

a microcomputer which is set so as to produce 
an electronic ticket from at least data indicating 
a tieket publication source and data indicating 
the price of a ticket. 

4. An electronic ticket vending system according to 
Claim Z, wherein said electronic ticket vending 
means further comprising; 

means for storing a secret key of asymmetric 
encryption algorithm which varies with each 
ticket publisher and a public key whioh forms a 
counterpart to said sacret key. 

5. An electronic ticket vending system according to 
Claim V wherein said electronic ticket storage 
means comprising: 

electronic ticket storage means tor storing at 

least an electronic ticket: 

electronic money storage means for storing at 

least electronic money; 

imnsaction history storage means; 

an I/O Interface with the outside; and 

a microprocessor which is set so as to control 

transmission and reception of an electronic 

ticket and electronic money and storage the 

history thereof. 

6. An electronic ticket vending system according to 
Claim 5, wherein said electronic ticket storage 
means funher comprising: 

means for storing unencrypted ticket data; and 
means lor storing an electronic signature which 
Is produced by encrypting Lhe whole or a part 
erf said ticket data by said secret key of the 
asymmetric algorithm; 

wherein said microprocessor is eet eo as to 
return said unencrypted ticket information to a 
first command obtained via said I/O interface 
with the outside for reading said unencrypted 
ticket data as a response to said first command, 
check the validity of a second command for 
reading data having said electronic signal ure 



70 



75 



20 



SB 



for said second command. Bnd return said 
ticket Information and said electronic signature 
as a response to said second command when 
59 id microprocessor Judges that said -second 
command is valid. 

7. An electronic ticket vending system according to 
Claim 5 r wherein said electronic ticket storage 
means comprising: 

means for storing ticket information which Is 
encrypted by said secret key of the asym metric 
encryption algorithm; and 
means for storing a public key which forms a 
counterpart to said secret key which encrypts 
said ticket information, 

wherein said microprocessor is set so as to 
return the result which is obtained by decrypting 
said snerypted ticket Information by sakj public 
key to a first command obtained via said I/O 
interface with the outside for reading said unen- 
crypted ticket data as a response to said first 
command, check the validity of a eecond com- 
mand for reading data having said electronic 
signature for said second command, and return 
eaid encrypted ticket information ae a response 
to said second command when said microproc- 
essor judges that said second command is 
valid. 



30 



8. An electronic ticket vending system according to 
Claim 6. wherein sdW microprocessor is set so as 
lo return a response to the electronic signature 
which Is sent together with said second command 
as obtained via said physical interface with the outside 
on whether there exists an electronic signature con- 
forming to said electronic signature in said else- 
ironic ticket storage means. 

40 e. An electronic ticket vending system according to 
Claim 5. wherein said microprocessor is set so thai 
an item relating to said electronic ticket cannot be 
deleted from said transaction history storage 
means until said electronic ticket stored in saidelec- 

a& tronlc ticket storage means is deleted. 

10. An electronic ticket vending system according to 
Claim 5, wherein said microprocessor is set so as 
to store electronic money in said electronic money 
5Q storage means for refunding of the ticket and then 
delete the electronic ticket 1o be refunded which is 
stored in eaid electronic ticket storage area of eaid 
electronic ticket storage means. 

55 t1, An electronic ticket vending system according to 
Claim 5, wherein said electronic ticket storage 
means further has an area for storing an Invalid flag 
and said microprocessor comprising: 



17 

PAGE 25/41 1 RCVD AT 1 1/24/2004 1 1:28:47 AM [Eastern Standard Time] " SVR:USPT0-EFXRF-1f2 * DNIS:8729306 * CSID:202 293 6229 ' DURATION (mm-ss):14-04 



NOV. 24. 2004 11:39AM CBL&H 202 293 6229 



NO. 0539 P. 26 - - 



33 



EP 0 713 198 A2 



34 



mean for making said invalid flag correspond- 
ing to said electronic ticket to be refunded valid 
lor refunding of the ticket and then transferring 
said electronic ticket to said electronic lickei 
vending means; and 

means for deleting said electronic tickel stored 
in said electronic ticket storage area of said 
electronic ticket storage means after comple- 
tion of transfer. 

12. An electronic ticket vending method in a system 
comprising electronic ticket transmission and 
reception means, at least one terminal means, and 
a communication line connecting said electronic 
ticket transmission and reception means end said 
at least one terminal means comprising: 

a step of storing electronic money and an elec- 
tronic ticket and sending the purchase desire 
electronic ticket to said electronic tickel trans- 
mission and reception means from at least one 
of the termtnBJe connected to the electronic 
ticket storage means which can be electroni- 
cally connected to said terminal means via said 
communication line; 

a step of sending a sending request tor the pur- 
chase cost to said purchase desire terminal 
side when said electronic tickel can be vended 
from said electronic ticket transmission and 
reception means; 

a step of sending ihe electronic money of said 
purchase cost to said elect ronic ticket transmis- 
sion and reception means from said purchase 
desire terminal side via said communication 
line; 

a step of sending said purchase desire elec- 
tronic ticket to said purchase desire terminal 
side trom said electronic ticket transmission 
and reception means alter said electronic 
money Is received; and 

a step of receiving said sent electronic ticket on 
said terminal side and storing it in said elec- 
tronic ticket storage means connected to said 
terminal side. 

13. An electronic ticKet vending method according to 
Claim 1 2, wherein when said purchased electronic 
ticket is to be refunded, said method farther com- 
prising: 

a step ol sending a refunding request 1o said 
electronic ticket transmission and reception 
means from said terminal skte via said commu- 
nication line and requesting sending of said 
electronic ticket which is requested to refund to 
the electronic tickel storage means connected 
to said terminal side; 

a step of receiving said electronic ticket from 



20 



said electronic tickel storage means via said 
communication line and then confirming the 
validity of said electronic ticket; 
a step ol sending e lect ron ic mon ey ol said ticket 
s refund to said tormina! side via said communi- 

cation line when said electronic ticket transmit 
elon and reception means judges that said elec- 
tronic ticket is valid as a result of satdconfirma- 
lion: and 

10 a step of transferring said electronic money to 

said electronic ticket storage device from said 
terminaJ means receiving said electronic 
money. 

is 14. An electronic ticket refunding method in a system 
comprising electronic ticket transmission find 
reception means, at leasl one tsrmlnai means, and 
a communication line connecting said electronic 
ticket transmission and reception means and eaid 
at least one terminal moans comprising: 

sstep of storing electronic money and an elec- 
tronic ticket and sending an electronic ticket 
refunding request to said elect ronic tickel trans- 

se mission and reception means 1rom el least one 

of the terminals connected to the electronic 
ticket storage means which ian be electroni- 
cally connected to said terminal means via said 
communication line; 

90 a step for requesting Sending of said electronic 

Ticket which Is requested to relund 10 the elec- 
tronic ticket storage means connected to said 
terminal side trom said electronic ticket trans- 
mission and reception means: 

35 a step of receiving said electronic tickel from 

said electronic ticket storage means via said 
communication line and then confirming the 
validity of said received electronic ticket by said 
electronic ticket transmission and reception 

40 means; 

a step of sendingelectronic money ol said ticket 
refund to said terminal side via said communi- 
cation line when said electronic ticket transmis- 
sion and reception means Judges that said elec- 

44 ironic ticket Is valid as a result ol said confirma- 

tion; and 

a step of transferring said electronic money to 
said electronic ticket storage device from said 
terminal means receiving said electronic 
so money. 

1S. An electronio ticket vending method according to 
Claim 12. furthercomprising; 

£5 a step of receiving said electronic money from 

said electronic ticket storage means by said 
electronic ticket transmission and reception 
means; 
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e siep erf storing thai said electronic money is 
received from said electronic ticket storage 
means; 

a step of sending said electronic ticket to said 
electronic ticket storage means-, and 
a step of storing that sab electronic ticket Is 
sent to said electronic ticket storage means. 

IB. An electronic ticket vending method according to 
Claim 1 3, further comprising; 

a step of receiving eaid electronic ticket from 
said electronic ticket storage means by said 
electronic ticket transmission and reception 
means; 

a step of storing mat said electronic ticket is 
received from said electronic ticket storage 
means; 

a step of sending said electronic money to said 
electronic llcket storage means; and 
a step of storing that said electronic money is 
sent to said electronic ticket storage means. 

17. An electronic ticket vending method according 10 
Claim 12. further comprising: 

a step ol sending said electronic money to esid 
electronic ticket transmission and reception 
means from said terminal side; 
a step of storing that said electronic money U 
sent to said electronic ticket transmission and 
reception means; 

a step of receiving said electronic ticket by said 
terminal side, and 

a step of storing that said terminal side receives 
said electronic ticket. 

18. An electronic ticket vending method according to 
Claim 13. further comprising: 

a step of sending said electronic ticket to said 
electronic ticket transmission and reception 
means from said electronic ticket storage 
means; 

a step of storing that said electronic ticket is 
BBnt; a step of receiving said electronic money 
Irom said electronic ticket transmission and 
reception means by said electronic ticket stor- 
age means; and 

a step ot storing that said electronic ticket stor- 
age means receives said electronic money. 
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1- TICKET VENDING 
2. TICKET REFUNDING 
3 TICKET CHANGING 
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INPUT "2* 



PLEASE INSERT THE CARD. 
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4 



INPUT "2* 



PLEASE SELECT A TICKET NUMBER. 

1 S PRODUCTION 23198 ONE TICKET 
" FOR TANAKA HANAKO CONCERT, 

SEAT S. C-5 ON MAY 20. 

2 TWO TICKETS FOR PRO BASEBALL 
TEAM A 345123. AND FOR PRO 
BASEBALL OPEN GAME, RESERVED 
SEAT A, 2-5S ON JUNE 2. AND 
RESERVED SEAT A. 2-57 ON JUNE 
2. . 



INPUT "1 
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ARE THE REFUNDING TICKETS TWO 
OF RESERVED SEAT A. 2-5 6 ON 
JUNE 2. AND RESERVED SEAT A 
2-57 ON JUNE 2» FOR PRO BASEBALL 
TEAM A 345123 AND FOR PRO 
BASEBALL OPEN GAME? 
IF CORRECT PLEASE PUSH "1" , 
OTHERWISE PUSH "2 m . 
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4 



INSERT THE CARD 



UNDER PROCESSING. 
PLEASE WAIT FOR A WHILE, 



1360 



I END OF SENDING 
J ELECTRONIC MONEY 



REFUNDING MONEY ¥7,400 IS SENT. 
PLEASE CONFIRM. a 
THANK YOU FOR THE APPLICATION. 
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FIG. 14 
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TRANSACTION # 


OBJECT 


SENT/ 
RECEIVED 


CONTENT 


DELfc 1 AbLfc 
FLAG 




* 


• 




i 


34 53 22 


MONEY 


RECEIVED 


¥2.8 0 0 


OFF 


3 4 5 ] 2 2 


TICKET 


SENT 


5/5: RESERVED SEAT B 21-12 


OFF 


3 4 5 12 3 


MONEY 


RECEIVED 


¥7,4 0 0 


ON 


3 4 5 12 3 


TICKET 


SENT 


B/2 : RESERVED SEAT A 2-56 
6/2: RESERVED SEAT A 2-57 


ON 


# 
* 


■ 


■ 






3 6 7 0 0 1 


TICKET 


RECEIVED 


6/2 : RESERVED SEAT A 2-56 
6/2 : RESERVED SEAT A 2-57 


ON 


3 6 7 0 0 3 


MONEY 


SENT 


¥ 7,4 0 0 


ON 



FIG. 15 
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id of Yh£ opposite 


OBJECT 


SENT/ 


CONTENT 


' DELEYable 
FLAG 


TEAM A 


MONEY 


SENT 


¥7,4 0 0 


ON 


PRO bASEBALL 
TEAM A 


TICKET 


RECEIVED 


# 1 


ON 




m 


• 


* 
• 




£rO baseball 

TEAM A 


TICKET 


SENT 


# 1 


ON 


PhO BASEBALL 
TEAM A 


MONEY 


RECEIVED 


¥ 7,4 0 0 


ON 
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FIG. 17 



1510 



IMPUT *1' 



1. TICKET CONTENT DISPLAYED 

2. MONEY BALANCE DISPLAYED 

3. TRANSACTION HISTORY 
DISPLAYED 
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S PRODUCTION 23196 ONE TICKET 
FOR TANAKA HANAKO CONCERT, 
SEAT S. C-5 ON MAY 20. 
TWO TICKETS FOR PRO BASEBALL 
TEAM A 345123, AND FOR PRO 
BASEBALL OPEN GAME, RESERVED 
SEAT A. 2-56 ON JUNE 2. AND 
RESERVED SEAT A. 2-57 ON JUNE 2. 



INPUT "2' 



INPUT "T 



1540 



PRO BASEBALL 

TEAM A MONEY SENT ¥7,400 
PRO BASEBALL 

TEAM A TICKET RECEIVED #1 



1530 



BALANCE ¥2.600 
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(54) 



Electronic ticket vending system and method thereof 



(57) A system comprises an electronic ticket vend- 
ing and refunding device (1) retained by a ticket publish- 
er, a terminal device (3) having a data input device (1 9\ 
a data display device (18), and a data transmission and 
reception device, etc. which are operated by a purchas- 
er, end en electronic ticket storage device retained by 
the purchaser, and the vending and refund^ device 
and the terminal device are connected by a communi- 



cation line such as a telephone line: end the storage de- 
vice and the terminal device can be connected in contact 
or non-contact, and transmission and reception of data 
between the vending and refunding device and the stor- 
age device are executed by electronic money and an 
electronic ticket which are electronically signed, and a 
trouble of sending and receiving of an electronic ticket 
and electronic money is prevented by recording the 
transaction history as required. 
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